Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91452f7-539b-3f8b-ab36-49dcbd006744.roa
File:                     f91452f7-539b-3f8b-ab36-49dcbd006744.roa (raw, json)
Hash identifier:          u4deAlb2CtaB/8uciazZ4RjCVNmwfr1AD8wLn6M5Np4=
Subject key identifier:   6C:B8:71:5C:E1:A6:66:19:4F:67:71:26:E3:20:F5:61:D6:14:45:A8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849088189E6F5994AB95DFFD800
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91452f7-539b-3f8b-ab36-49dcbd006744.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     13335
IP address blocks:        162.159.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:89:e6:f5:99:4a:b9:5d:ff:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=79cee84c-7092-46f9-b254-99d980c970c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:a3:bb:3c:7f:a8:56:e4:74:e6:04:90:71:
                    28:f3:c3:70:0d:1b:6d:42:33:57:b5:52:05:65:ed:
                    d3:7f:59:a0:d9:54:d0:f7:25:99:3b:d7:48:4b:40:
                    e1:38:18:f1:6a:44:d5:c9:fe:f2:24:9e:90:d4:70:
                    1f:6f:b2:c6:69:c9:96:f1:af:66:51:ca:9d:58:25:
                    0d:98:31:19:c6:b7:30:21:f1:68:e2:38:a1:f3:c7:
                    35:08:e5:11:3a:44:44:da:56:3d:4f:cc:62:4d:20:
                    c6:e1:d1:fb:e1:db:d0:e4:43:4a:c4:cf:76:ea:44:
                    99:3f:6b:54:8f:f4:c6:77:64:f7:1f:ae:46:18:06:
                    e9:ae:06:36:9b:a1:02:27:fa:e1:36:19:3f:5c:8b:
                    44:85:05:91:03:e1:1e:54:30:c2:01:01:c2:ec:8f:
                    a5:b7:4e:28:9a:1c:f6:36:34:0f:36:27:f2:c8:ce:
                    3a:01:3d:b0:46:dd:7b:fa:a3:43:70:44:b7:55:66:
                    c0:0b:e1:e8:78:a5:67:f8:04:d5:59:f0:27:22:48:
                    f3:4c:61:2b:54:26:26:e5:98:c2:fc:be:c3:9a:ad:
                    0d:e1:c8:73:ba:05:cd:7d:f2:34:5b:e3:d0:dc:3f:
                    d3:64:d3:de:da:b1:09:14:e5:ce:2b:fb:06:93:88:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B8:71:5C:E1:A6:66:19:4F:67:71:26:E3:20:F5:61:D6:14:45:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f91452f7-539b-3f8b-ab36-49dcbd006744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c4:0f:1f:c5:6e:d2:46:db:2b:a7:28:8d:1f:8f:f7:c9:98:
         d3:99:d7:d1:69:14:69:cc:99:0d:ae:b5:61:cf:12:57:ea:63:
         3e:43:1b:a0:91:71:96:ca:3e:ef:84:21:a7:0c:4e:25:1e:da:
         83:68:94:75:70:17:5e:9a:cc:0a:1e:80:01:56:44:85:31:65:
         6f:bd:f9:a4:fb:f9:ba:b5:7c:a1:94:06:83:6b:c0:cd:b5:9f:
         24:0f:3b:50:de:e7:92:83:42:8a:76:72:98:f5:f1:af:5b:f9:
         fe:fb:a7:38:e1:1d:44:0e:e0:1c:95:9c:84:35:38:c1:f5:6b:
         5b:a8:4d:df:da:63:98:7a:0a:76:a0:94:93:53:2b:0d:00:8b:
         9b:19:03:89:c1:a3:7a:86:7f:e3:32:ef:d0:11:ec:8c:38:fb:
         e8:62:b2:ac:3e:d7:12:83:7a:89:b1:75:6f:08:43:17:b1:4c:
         bd:f5:3f:4e:2a:ff:18:79:c1:df:cd:1d:65:d6:18:ca:72:cb:
         80:45:37:d8:0e:26:a0:ea:6f:4d:4c:f7:5e:21:6d:5c:b1:f8:
         10:ab:b8:8a:03:28:7f:05:ef:4d:ed:7b:6f:fc:af:3d:af:4d:
         27:39:86:9d:6c:4d:63:32:e6:bb:0f:04:d8:fa:87:95:c8:80:
         f0:29:a4:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYnm9ZlKuV3/2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzljZWU4NGMtNzA5Mi00NmY5LWIyNTQtOTlkOTgwYzk3MGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiCjuzx/qFbkdOYEkHEo88NwDRttQjNXtVIF
Ze3Tf1mg2VTQ9yWZO9dIS0DhOBjxakTVyf7yJJ6Q1HAfb7LGacmW8a9mUcqdWCUN
mDEZxrcwIfFo4jih88c1COUROkRE2lY9T8xiTSDG4dH74dvQ5ENKxM926kSZP2tU
j/TGd2T3H65GGAbprgY2m6ECJ/rhNhk/XItEhQWRA+EeVDDCAQHC7I+lt04omhz2
NjQPNifyyM46AT2wRt17+qNDcES3VWbAC+HoeKVn+ATVWfAnIkjzTGErVCYm5ZjC
/L7Dmq0N4chzugXNffI0W+PQ3D/TZNPe2rEJFOXOK/sGk4ggVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGy4cVzhpmYZT2dxJuMg9WHWFEWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZjkxNDUyZjctNTM5Yi0z
ZjhiLWFiMzYtNDlkY2JkMDA2NzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTEDx/FbtJG2yunKI0fj/fJmNOZ19FpFGnMmQ2utWHPElfqYz5DG6CR
cZbKPu+EIacMTiUe2oNolHVwF16azAoegAFWRIUxZW+9+aT7+bq1fKGUBoNrwM21
nyQPO1De55KDQop2cpj18a9b+f77pzjhHUQO4ByVnIQ1OMH1a1uoTd/aY5h6Cnag
lJNTKw0Ai5sZA4nBo3qGf+My79AR7Iw4++hisqw+1xKDeomxdW8IQxexTL31P04q
/xh5wd/NHWXWGMpyy4BFN9gOJqDqb01M914hbVyx+BCruIoDKH8F703te2/8rz2v
TSc5hp1sTWMy5rsPBNj6h5XIgPAppMo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:19 2025 by rpki-client